CVE-2026-61805 Frappe LMS: Quiz result manipulation and cross-user submission forgery

Frappe Learning Management System LMS is a learning system that helps users structure their content. Prior to version 2.54.0, quiz submission records are not adequately authorized on the server. Through a REST bypass, an authenticated student can record a passing or perfect quiz result without...